Page MenuHomePhabricator

control-port-filter ddos test
Open, NormalPublic

Description

  • a query stress test - bombarding cpfp with a very high volume of valid requests. Does cpfp fail gracefully? How does it cope with a simulated DDoS?

Details

Impact
Normal

Event Timeline

discussion:
https://mailman.boum.org/pipermail/tails-dev/2016-November/011040.html

conclusion:

I guess we can use T16 for DDOS from external sources.

This ticket an attempt to contain damage by compromised workstations from ddos'ing the control port filter. Even if solved, still Tor could be ddos'ed. So I suggest to defer this ticket for a later release. The we perhaps solve it by using iptables as a limiter.